Memory layout: Difference between revisions
No edit summary |
mNo edit summary |
||
Line 506: | Line 506: | ||
| 0x2470 | | 0x2470 | ||
| The unprotected ARM9-bootrom copies 0x1FFFA000(AXIWRAM mem initialized by ARM11-bootrom) size 0x2470 to 0x07FFD000(mirror of 0x01FFD000). This block contains DSi keys. | | The unprotected ARM9-bootrom copies 0x1FFFA000(AXIWRAM mem initialized by ARM11-bootrom) size 0x2470 to 0x07FFD000(mirror of 0x01FFD000). This block contains DSi keys. | ||
* | * 0x01FFD000 is the RSA-1024 modulus for the retail System Menu | ||
* | * 0x01FFD080 is the RSA-1024 modulus for DSi Wifi firmware and DSi Sound | ||
* | * 0x01FFD100 is the RSA-1024 modulus for base DSi apps (Settings, Shop, etc.) | ||
* | * 0x01FFD180 is the RSA-1024 modulus for DSiWare and RSA-signed cartridge headers | ||
* | * 0x01FFD210 is the keyY for per-console-encrypted ES blocks | ||
* | * 0x01FFD220 is the keyY for fixed-keyX ES blocks | ||
* | * 0x01FFD300 is the DSi common (normal)key | ||
* | * 0x01FFD380 is the first half of the retail keyY for modcrypt crypto "Nintendo" | ||
* | * 0x01FFD398 is the keyX used for 'Tad' crypto, usually in keyslot 0x02 "Nintendo DS", .. | ||
* | * 0x01FFD3C8 is the fixed keyY used for eMMC partition crypto (keyslot 0x03) | ||
* | * 0x01FFD3E0 is the 0x1048-byte Blowfish data for DSi cart crypto | ||
* | * 0x01FFE428 is the 0x1048-byte Blowfish data for DS cart crypto | ||
|- | |- | ||
| 0x01FFF470 | | 0x01FFF470 |